PT-2014-3508 · Openstack · Openstack Image Registry/Delivery Service

Paul Mcmillan + 1 · Publicado 2014-04-27 · Atualizado 2023-02-13 · CVE-2014-0162

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Média

Vetor base

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenStack Image Registry and Delivery Service (Glance) versions 2013.2 before 2013.2.4 OpenStack Image Registry and Delivery Service (Glance) versions icehouse before icehouse-rc2

Description The issue allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.

Recommendations For OpenStack Image Registry and Delivery Service (Glance) versions 2013.2 before 2013.2.4, update to version 2013.2.4 or later. For OpenStack Image Registry and Delivery Service (Glance) versions icehouse before icehouse-rc2, update to version icehouse-rc2 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2014-0162

GHSA-R7PJ-RVWG-VXHR

RHSA-2014:0455

USN-2193-1

Produtos afetados

Openstack Image Registry/Delivery Service

Referências · 17

• https://nvd.nist.gov/vuln/detail/CVE-2014-0162 · Nota de Segurança
• https://access.redhat.com/errata/RHSA-2014:0455 · Nota
• https://security-tracker.debian.org/tracker/CVE-2014-0162 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2014-0162 · Aviso do Fabricante
• http://ubuntu.com/usn/USN-2193-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-r7pj-rvwg-vxhr · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2014-0455.html · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=1085163 · Nota
• https://cve.org/CVERecord?id=CVE-2014-0162 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2014-0162 · Nota
• https://osv.dev/vulnerability/CVE-2014-0162 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-0162 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-0162 · Aviso do Fabricante
• https://launchpad.net/bugs/1298698 · Nota
• https://ubuntu.com/security/notices/USN-2193-1 · Aviso do Fabricante